Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve the WiPOS Service. This includes:

• Account information — your name, email address, and password when you register for WiPOS.
• Business information — your business name, address, registration number, and contact details that you enter into the application.
• Product and inventory data — product names, prices, categories, variants, stock levels, and product images that you upload or create within WiPOS.
• Transaction data — sales records, payment methods, amounts, receipts, and related transaction information processed through WiPOS.
• Usage data — how you interact with the application, feature usage patterns, device type, operating system version, and app version, used to improve the Service.
• Device identifiers — Android device identifiers used to associate your account with your authorised device.

2. How We Use Your Information

We use the information we collect solely to operate and improve WiPOS:

• To provide the WiPOS Service — process transactions, sync data to the cloud, generate reports, and display your business data across your devices.
• To maintain and secure your account — authenticate logins, protect against unauthorised access, and enforce subscription validity.
• To provide customer support — respond to enquiries sent via WhatsApp or email, and diagnose technical issues.
• To send important service communications — subscription renewals, security notices, or changes to this policy. We do not send unsolicited marketing emails.
• To improve the Service — analyse anonymised usage patterns to fix bugs and develop new features.

We do not sell, rent, or trade your personal information or your customers' transaction data to any third party.

3. Data Storage and Security

Your data is stored on enterprise-grade cloud infrastructure provided by Supabase, with servers located in a secure data centre. All data is:

• Encrypted in transit using TLS (Transport Layer Security).
• Encrypted at rest using industry-standard encryption.
• Backed up automatically in real time so your data is never lost.

A local copy of your data is also stored on your Android device to allow the application to function when the internet is unavailable. This local data is protected by your device's own security mechanisms (PIN, biometrics, or pattern lock).

While we take commercially reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong passcode on your device and keep your WiPOS login credentials confidential.

4. Data Sharing

We share your data only in the following limited circumstances:

• Service providers — we share data with Supabase (cloud database and storage) as a sub-processor to deliver the Service. Supabase processes data on our behalf under strict data processing terms.
• Legal requirements — we may disclose information if required by Malaysian law, a court order, or other legal process, or to protect the rights, property, or safety of WiPOS, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We do not share your data with advertisers, marketing platforms, or data brokers.

5. Your Transaction Data and Your Customers

WiPOS processes sales transactions on behalf of your business. The sales records, customer-facing receipt data, and payment logs entered into WiPOS belong to you and are stored in your account.

We do not collect or store end-customer personal information (such as your shoppers' names or payment card details) — WiPOS records the transaction amounts and payment methods you log, not the personal details of the individuals purchasing from your store.

If you use the MyKasih reference number logging feature, you are responsible for handling those reference numbers in accordance with applicable Malaysian data protection requirements.

6. Data Retention

We retain your account data and transaction history for as long as your WiPOS subscription is active. If you choose not to renew your subscription:

• Your account and data remain accessible until the end of your paid period.
• After expiry, your data is retained for a further 90 days to allow for reactivation or export.
• After 90 days post-expiry, your data may be permanently deleted from our servers.

You may request deletion of your data at any time by contacting us at the address below.

7. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your account and associated data, subject to any legal retention obligations.
• Portability — export your transaction and product data in Excel (.xlsx) format directly from within the WiPOS application at any time.

To exercise any of these rights, contact us using the details in Section 9. We will respond to requests within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through an in-app notice. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: